When the destination directory cannot be written to (read-only or insufficient rights), an error is thrown and the temporary directory isn't cleaned up. Any subsequent update attempt will make it grow.

Perhaps the temporary directory could be cleaned before any update attempt?